Skip to content

Security: install only binary dependency wheels#3099

Merged
dennisbader merged 2 commits intounit8co:masterfrom
daidahao:security/binary-dep-wheels
May 3, 2026
Merged

Security: install only binary dependency wheels#3099
dennisbader merged 2 commits intounit8co:masterfrom
daidahao:security/binary-dep-wheels

Conversation

@daidahao
Copy link
Copy Markdown
Contributor

@daidahao daidahao commented May 1, 2026

Checklist before merging this PR:

  • Mentioned all issues that this PR fixes or addresses.
  • Summarized the updates of this PR under Summary.
  • Added an entry under Unreleased in the Changelog.

Fixes #.

Summary

Configured uv to install only binary wheels for all dependencies to reduce supply-chain risk from source-distribution build execution.

This is one of the best practices recommended. I have restricted the scope to tool.uv.pip so it only affects Darts developers.

Other Information

@daidahao daidahao requested a review from dennisbader as a code owner May 1, 2026 11:18
Co-authored-by: Zhihao Dai <zhihao.dai@eng.ox.ac.uk>
@codecov
Copy link
Copy Markdown

codecov Bot commented May 1, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 96.24%. Comparing base (b3466cf) to head (95e8b6c).
⚠️ Report is 1 commits behind head on master.

Additional details and impacted files
@@            Coverage Diff             @@
##           master    #3099      +/-   ##
==========================================
- Coverage   96.31%   96.24%   -0.07%     
==========================================
  Files         161      161              
  Lines       17350    17350              
==========================================
- Hits        16710    16699      -11     
- Misses        640      651      +11     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

Copy link
Copy Markdown
Collaborator

@dennisbader dennisbader left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM thanks @daidahao 🚀

@dennisbader dennisbader merged commit 73419b1 into unit8co:master May 3, 2026
9 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants